Suricata http2: header handling evasion

Suricata's HTTP/2 header inspection rules can be bypassed using specially crafted network traffic, allowing malicious content to slip through the security monitoring system undetected.

The HTTP/2 header handling in Suricata prior to version 7.0.3 contains a logic flaw (CWE-284) that allows attackers to craft malformed headers to evade rule-based detection. An attacker on the network path can send specially crafted HTTP/2 traffic to bypass security rules, reducing detection effectiveness of intrusion detection/prevention capabilities.